USER_login.php
<?php require_once("sqlconnction.php") ; ?>
<?php include "function.php" ;?>
<?php
if(isset($_POST['submit'])) {
$errors = array() ;
$required_field =array('user_login' ,'pass_login') ;
foreach($required_field as $fieldname) {
if (!isset($_POST[$fieldname] ) ||
empty($_POST[$fieldname] ) && /// and not 0
($_POST[$fieldname] !== 0 )) {
$errors[] = $fieldname ;
}
}
// length check for entry
$field_with_lengths =array( 'user_login' => 30) ;
foreach($field_with_lengths as $fieldname =>$maxlength) {
if(strlen(trim(mysql_prep(@$_POST[$fieldname]))) > $maxlength) {
$errors[] = $fieldname ;
}
}
if (empty($errors)) {
$user_name = mysql_prep(@$_POST['user_login' ]) ;
$password = mysql_prep(@$_POST['pass_login']) ;
$hased_password = sha1($password) ;
// perforum update
$query = "SELECT id ,user_name " ;
$query .= "FROM users " ;
$query .= "WHERE user_name = '{$user_name } ' " ;
$query .= " AND password = '{$hased_password } ' ";
;
// insert in my sql
$result =mysql_query($query ,$connection) ;
if (!$result) {
echo mysql_error() ; }
//check if there is line change
//this is mysql_num_rows if we will resicve anouer line
if(mysql_num_rows($result) == 1) {// single page error messaging
// Success
// only on username match
//password autocitai
// $founduser = mysql_fetch_array($result ) ;
// redirect_to("staff.php") ;
}else{
redirect_to("log_in_front_page.php") ;
$message = "Bad username password comination" ;
}
}else{
$message = "please enter username/password" ; }
}
include 'log_in_front_page.php';
mysql_close($connection) ;
?>
log_in_front_page.php
<?php include "header.php" ; ?>
<?php require("user_login.php") ; ?>
<table id="structure">
<tr>
<td id="navigation">
</td >
<td id="page">
<h2>User login</h2>
<p>Please enter username and password ,</p>
<?php
if(isset($message )) {
echo $message ; }
?>
<?php
if(!empty($errors)) {
echo $errors ; }
?>
<form action="user_login.php" method="post" >
<p>User name : <input type ="text" name = "user_login" size = "30" maxlength ="30" id="username" /> </p>
<form action="user_login.php" method="post" >
<p>Password : <input type ="password" name = "pass_login" size = "30" maxlength ="30" id="password" /> </p>
<input type="submit" name="submit" value="Log in" />
<input type="reset" value="Reset" />
</form>
</td>
</tr>
</table>
</div>
<?php include "footer.php" ; ?>
ראשי
צ'אט
30-03-2009, 15:22
מצב כלאיים
